CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 351:

  Two remote offices need to be connected securely over an untrustworthy MAN. Each office needs to access network shares at the other site. Which of the following will BEST provide this functionality?

  A. Client-to-site VPN
  B. Third-party VPN service
  C. Site-to-site VPN
  D. Split-tunnel VPN
  C. Site-to-site VPN

  ---

  Explanation/Reference:

  A site-to-site VPN is a type of VPN that connects two or more remote offices securely over an untrustworthy network, such as the Internet. A site-to-site VPN allows each office to access network shares and resources at the other site, as if they were on the same local network. A site-to-site VPN encrypts and tunnels the traffic between the offices, ensuring privacy and integrity of the data. References: https://www.comptia.org/blog/what- is-a-site-to-site-vpn

• Question 352:

  Which of the following network topologies involves sending all traffic through a single point?

  A. Mesh
  B. Hybrid
  C. Hub-and-spoke D. Point-to-point
  C. Hub-and-spoke D. Point-to-point

  ---

  Explanation/Reference:

  Hub-and-spoke is a network topology where each node connects to a central switching device, such as a hub or a switch. All traffic between the nodes must pass through the central device, which acts as a single point of communication and

  control. Hub-and-spoke topology is simple, easy to manage, and cost-effective, but it also has drawbacks, such as low redundancy, high latency, and scalability issues.

  References:

  Network Topologies ?N10-008 CompTIA Network+ : 1.21 CompTIA Network+ Certification Exam Objectives, page 92

• Question 353:

  An attack is redirecting traffic from network hosts by changing their assigned DNS server. None of the hosts have static IP addresses, and the rogue DNS server was assigned automatically during the hosts' lease renewal for the network configuration. Which of the following should be implemented to prevent this type of attack from occurring again?

  A. DHCP snooping
  B. Port security
  C. 802.1X authentication
  D. MAC filtering
  A. DHCP snooping

• Question 354:

  A VoIP line will MOST likely have which of the following connectors?

  A. RJ-11
  B. DB-25
  C. BNC
  D. RJ-45
  D. RJ-45

• Question 355:

  Which of the following should be used to manage outside cables that need to be routed to various multimode uplinks?

  A. Fiber distribution panel
  B. 110 punchdown block
  C. PDU
  D. TIA/EIA-568A patch bay
  E. Cat 6 patch panel
  A. Fiber distribution panel

  ---

  Explanation/Reference:

  A fiber distribution panel is a device that provides a central location for connecting and managing fiber optic cables and optical modules. It can support various types and speeds of fiber optic links, including multimode uplinks. Therefore, a fiber distribution panel should be used to manage outside cables that need to be routed to various multimode uplinks.

• Question 356:

  A technician is trying to determine whether an LACP bundle is fully operational. Which of the following commands will the technician MOST likely use?

  A. show interface
  B. show config
  C. how route
  D. show arp
  A. show interface

  ---

  Explanation/Reference:

  Link Aggregation Control Protocol (LACP) is a standard protocol used to bundle multiple physical links together to form a single logical link. To determine whether an LACP bundle is fully operational, the technician will likely use the "show interface" command. This command is used to display the status of network interfaces on a device, such as a switch or router.

  When the technician runs the "show interface" command, the output will include the status of the LACP bundle, such as whether it is up or down and whether all of the physical links in the bundle are active and working properly. The technician can also use the command "show interfaces ethernet [interface-number] lacp" to display the LACP information for a specific bundle.

• Question 357:

  A false camera is installed outside a building to assist with physical security. Which of the following is the device assisting?

  A. Detection
  B. Recovery
  C. Identification
  D. Prevention
  D. Prevention

  ---

  Explanation/Reference:

  The false camera is seen by people. They think it is real and this prevents them from doing something wrong.

• Question 358:

  Within the realm of network security, Zero Trust:

  A. prevents attackers from moving laterally through a system.
  B. allows a server to communicate with outside networks without a firewall.
  C. block malicious software that is too new to be found in virus definitions.
  D. stops infected files from being downloaded via websites.
  A. prevents attackers from moving laterally through a system.

  ---

  Explanation/Reference:

  The definition of Zero trust mentions nothing about firewalls, viruses or stopping infected files from being downloaded.

  Lesson 13: Topic 13A: Privileged Access Management - Zero trust is based on the idea that perimeter security is unlikely to be completely robust. On a modern network, there are just too many opportunities for traffic to escape monitoring/ filtering by perimeter devices. Zero trust uses systems such as continuous authentication and conditional access to mitigate privilege escalation and account compromise by threat actors. Another zero-trust technique is to apply microsegmentation. Microsegmentation is a security process that is capable of applying policies to a single node, as though it was in a zone of its own.

• Question 359:

  A network technician installs a new Layer 3 switch in the accounting office. Which of the following should the technician configure on the switch to enhance network security?

  A. Spanning tree
  B. Access control list
  C. QoS settings
  D. Duplex settings
  B. Access control list

• Question 360:

  While using a secure conference call connection over a corporate VPN, a user moves from a cellular connection to a hotel wireless network. Although the wireless connection and the VPN show a connected status, no network connectivity is present. Which of the following is the MOST likely cause of this issue?

  A. MAC filtering is configured on the wireless connection.
  B. The VPN and the WLAN connection have an encryption protocol mismatch.
  C. The WLAN is using a captive portal that requires further authentication.
  D. Wireless client isolation is enforced on the WLAN settings.
  C. The WLAN is using a captive portal that requires further authentication.